*.scrippsnationalnews.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:60:4e:2a:5a:67:fe:b3:d5:3c:70:6b:6b:88:7f:76 was issued on by Amazon.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.scrippsnationalnews.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:60:4e:2a:5a:67:fe:b3:d5:3c:70:6b:6b:88:7f:76
Serial Number (int): 3158501873500458669302269292080299894
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 6d:d0:47:e1:b5:68:79:8d:86:1d:ea:c0:af:b5:fb:42:8a:83:fb:d4
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 9f:29:0f:d2:49:6c:0e:68:a9:a2:8c:6e:6f:d3:e2:b6:cc:65:20:f8
Fingerprint (sha256): 08:b4:43:ad:c9:c7:c0:a6:90:15:c3:63:d2:62:cd:6e:23:4c:b3:4e:c6:f4:bd:66:77:61:07:ff:7d:83:d8:50

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.scrippsnationalnews.com

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.scrippsnationalnews.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.scrippsnationalnews.com
*.helloswfl.com
*.10news.com
*.3newsnow.com
*.abc15.com
*.abc2news.com
*.abcactionnews.com
*.fox47news.com
*.fox4now.com
*.kgun9.com
*.kivitv.com
*.kjrh.com
*.kmtv.com
*.kshb.com
*.ktnv.com
*.kypost.com
*.nbc26.com
*.news5cleveland.com
*.newschannel5.com
*.newsnet5.com
*.thedenverchannel.com
*.theindychannel.com
*.thelistshow.tv
*.thelisttv.com
*.tmj4.com
*.turnto23.com
*.tv20detroit.com
*.wcpo.com
*.wkbw.com
*.wmar2news.com
*.wptv.com
*.wxyz.com
*.kxxv.com
*.wtxl.com

Other certificates including the domain name scrippsnationalnews.com

(limited to 100 certificates)
lakana-02.map.fastly.net
scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
scrippsnationalnews.com
www.1041kqth.com
mediaassets.scrippsnationalnews.com
scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
sharing.1041kqth.com
scrippsnationalnews.com
scrippsnationalnews.com
lakana-02.map.fastly.net
*.scrippsnationalnews.com
scrippsnationalnews.com
mediaassets.1041kqth.com
scrippsnationalnews.com
lakana-02.map.fastly.net
lakana-02.map.fastly.net
scrippsnationalnews.com
scrippsnationalnews.com
scrippsnationalnews.com
scrippsnationalnews.com
*.scrippsnationalnews.com
scrippsnationalnews.com
scrippsnationalnews.com
*.scrippsnationalnews.com
scrippsnationalnews.com
scrippsnationalnews.com
mediaassets.scrippsnationalnews.com
lakana-02.map.fastly.net
www.1041kqth.com
scrippsnationalnews.com
www.1041kqth.com
sharing.1041kqth.com
mediaassets.scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
sharing.1041kqth.com
scrippsnationalnews.com
lakana-02.map.fastly.net
scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
sharing.1041kqth.com
mediaassets.1041kqth.com
lakana-02.map.fastly.net
mediaassets.1041kqth.com
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
scrippsnationalnews.com
*.scrippsnationalnews.com
mediaassets.scrippsnationalnews.com
mediaassets.1041kqth.com
mediaassets.1041kqth.com
scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
lakana-02.map.fastly.net
scrippsnationalnews.com
*.scrippsnationalnews.com
www.1041kqth.com
lakana-02.map.fastly.net

Certificate

The complete raw certificate details for *.scrippsnationalnews.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJHQlN2WX1QzuBO5+++c
TzB2pAKn0IwgVIg/Bs7QqK+B/p5mqScogpTmLEtIUml5P49Hvttj5jtTnrCFDBE2
OjwdRgA8z09qyRPP8TOh3ZVzpFbfEJsBXL+folosBNK7OPN5gKkOGyGSfQjpPd65
F1ai03p99bbstcSQp5e0rQWBbKn8FYfrU2Od8RPIXMtIEGPaoSuuQo4+Z9Y5gNCN
SFzHsLTcUJLFkHCr2szO5oLoqx0SXZaLf5BDE2qYNCZmoLJQIVB0SJj/4fMIYBi7
sIyYgY9YZ8nfmCtHbwsDFJWErzkXRyIbFzM66sm94TbU+ltnH0LHqxSspx18hJ0g
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3158501873500458669302269292080299894
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.scrippsnationalnews.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20774985958161098266809397887325069645472754832413581313695573948631297891120615880943862871536315105405324113558694813896572895800850098737817566661645194003440685607215759142752712997379158010688392936519357416453927176790918045833152831955832956305702594329091886881177287277301049676363287593685700867387935702865475956113397072240772397306369645538846875717349500866733998608176579824579588173429820002022504802173673452664910825318617263361396288305851898066594443173047576738049432158948523555716173192479375875332759624854962149234107112939826277598408804834038329586676553295236484610677806040759087178522689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6dd047e1b568798d861deac0afb5fb428a83fbd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (537 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrippsnationalnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helloswfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.10news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3newsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc15.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc2news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcactionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fox47news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fox4now.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kgun9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kivitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kjrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ktnv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbc26.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news5cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newschannel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsnet5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedenverchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theindychannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelistshow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelisttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmj4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turnto23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tv20detroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wcpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wkbw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmar2news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wxyz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kxxv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wtxl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000168ec2fcb6b0000040300463044022012335c5e19515f7e3bd95ba9249d60eafb9f96a65f46bda7dea9a2f8613f8dfe02201131bb756451f5309c1a12248e07b0f92f42aa89b61c6bb55ea1c3275118af4a0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168ec2fcc42000004030046304402206afd3a987a42cb832d41e76d79594cb0a765fc7eb66c46db5b5521655a7eadda02207a449202cf04e632725acc7647c2e17cddafbdc2f4e80d3bc55b6c80b7418dd5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002b006bc0804cf1932b5c3ca57bc64e55f0d6b4bc490b66fc136117b46f3a3241a58dfd33580f812dc67e1cb0c9154d7a8577e310336b12797de26d39a53212919f463ba914a2a1055d6da6d92f2b5383f2f3bb5a39fdba5b14f9b6359e325eddf625c1e5bec9b2eb33e5c69c078cd318c2d101caf7027e0c1a3542db2df543c21ebf4d2742c285ed15a03fd5830dec619fb46e3d5aa7c402dc4bcdce2437d104f9b6252456577343975bc6274f039198feec96c994b40cd593b912b78ce3c657f235d18d13de89e09f5fd1a8275727bc73647c44000fb60e7a01a97105d3f5d142b759d56145035bd73e27ede97c6027e1f26e9e8e02f7319bd020ac99508b96